vaultrun

type APIKey struct {
	ID         string     `json:"id"`
	Name       string     `json:"name"`
	Prefix     string     `json:"prefix"`
	Active     bool       `json:"active"`
	CreatedAt  time.Time  `json:"created_at"`
	LastUsedAt *time.Time `json:"last_used_at,omitempty"`
}

type AsyncRunOptions struct {
	RunOptions
	// CallbackURL receives an HTTP POST with the completed Run when the job finishes.
	CallbackURL string
}

type AsyncRunResult struct {
	RunID   string `json:"run_id"`
	Status  string `json:"status"`
	Message string `json:"message"`
}

type AuditLog struct {
	ID        string    `json:"id"`
	Actor     string    `json:"actor"`
	SessionID *string   `json:"session_id,omitempty"`
	RunID     *string   `json:"run_id,omitempty"`
	Action    string    `json:"action"`
	Metadata  any       `json:"metadata,omitempty"`
	Timestamp time.Time `json:"timestamp"`
}

type Client struct {
	// contains filtered or unexported fields
}

type CreateKeyOptions struct {
	Name      string
	ExpiresAt *time.Time // nil means no expiry
}

type CreateSessionOptions struct {
	Name           string
	Image          string
	NetworkEnabled bool
	CPULimit       float64
	MemoryLimitMB  int
	TimeoutSeconds int
	Labels         map[string]string
	// AllowedHosts limits outbound traffic to these hostnames or CIDRs. It needs
	// NetworkEnabled; the API rejects the combination otherwise.
	AllowedHosts []string
}

type CreatedKey struct {
	APIKey
	Key string `json:"key"`
}

type File struct {
	ID          string    `json:"id"`
	SessionID   string    `json:"session_id"`
	Path        string    `json:"path"`
	SizeBytes   int64     `json:"size_bytes"`
	ContentType string    `json:"content_type"`
	CreatedAt   time.Time `json:"created_at"`
}

type Image struct {
	ID        string   `json:"id"`
	Tags      []string `json:"tags"`
	SizeBytes int64    `json:"size_bytes"`
	CreatedAt string   `json:"created_at"`
}

type ListAuditLogsOptions struct {
	// SessionID restricts entries to a single session.
	// Non-master callers may only query sessions they own.
	SessionID string
	Limit     int // 0 uses the server default (50)
	Offset    int
}

type ListSessionsOptions struct {
	// LabelKey and LabelValue filter by a specific label (both must be set).
	LabelKey   string
	LabelValue string
}

type OrgMember struct {
	OrgID     string    `json:"org_id"`
	Principal string    `json:"principal"`
	Role      string    `json:"role"` // "viewer" | "executor" | "admin"
	CreatedAt time.Time `json:"created_at"`
}

type Organization struct {
	ID        string    `json:"id"`
	Name      string    `json:"name"`
	Slug      string    `json:"slug"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PullStatus struct {
	Image   string `json:"image"`
	Status  string `json:"status"`
	Message string `json:"message"`
}

type Run struct {
	ID              string     `json:"id"`
	SessionID       string     `json:"session_id"`
	Command         string     `json:"command"`
	Args            []string   `json:"args"`
	Status          string     `json:"status"`
	ExitCode        *int       `json:"exit_code,omitempty"`
	Stdout          *string    `json:"stdout,omitempty"`
	Stderr          *string    `json:"stderr,omitempty"`
	DurationMS      *int64     `json:"duration_ms,omitempty"`
	TimeoutSeconds  int        `json:"timeout_seconds"`
	OutputTruncated bool       `json:"output_truncated,omitempty"`
	CreatedAt       time.Time  `json:"created_at"`
	StartedAt       *time.Time `json:"started_at,omitempty"`
	FinishedAt      *time.Time `json:"finished_at,omitempty"`
}

type RunOptions struct {
	Command        string
	Args           []string
	Env            map[string]string
	WorkingDir     string
	TimeoutSeconds int
	// Secrets names secrets to inject as environment variables; the API key
	// must be allowed to use them.
	Secrets []string
}

type Session struct {
	ID             string            `json:"id"`
	Name           *string           `json:"name,omitempty"`
	Image          string            `json:"image"`
	Status         string            `json:"status"`
	ContainerID    *string           `json:"container_id,omitempty"`
	NetworkEnabled bool              `json:"network_enabled"`
	CPULimit       float64           `json:"cpu_limit"`
	MemoryLimitMB  int               `json:"memory_limit_mb"`
	TimeoutSeconds int               `json:"timeout_seconds"`
	Labels         map[string]string `json:"labels,omitempty"`
	CreatedAt      time.Time         `json:"created_at"`
	StoppedAt      *time.Time        `json:"stopped_at,omitempty"`
	AllowedHosts   []string          `json:"allowed_hosts,omitempty"`
}

type SessionStats struct {
	SessionID     string  `json:"session_id"`
	CPUPercent    float64 `json:"cpu_percent"`
	MemoryUsageMB float64 `json:"memory_usage_mb"`
	MemoryLimitMB int     `json:"memory_limit_mb"`
	PIDs          int     `json:"pids"`
}

type SharedArtifact struct {
	ID          string    `json:"id"`
	Name        string    `json:"name"`
	SizeBytes   int64     `json:"size_bytes"`
	ContentType string    `json:"content_type"`
	CreatedBy   string    `json:"created_by"`
	SessionID   *string   `json:"session_id,omitempty"`
	CreatedAt   time.Time `json:"created_at"`
}

type Snapshot struct {
	ID        string    `json:"id"`
	SessionID string    `json:"session_id"`
	Name      string    `json:"name"`
	CreatedBy string    `json:"created_by"`
	SizeBytes int64     `json:"size_bytes"`
	CreatedAt time.Time `json:"created_at"`
}

type StreamEvent struct {
	Type       string `json:"type"`        // "stdout", "stderr", or "done"
	Data       string `json:"data"`        // populated for stdout/stderr
	RunID      string `json:"run_id"`      // populated in done
	Status     string `json:"status"`      // populated in done
	ExitCode   *int   `json:"exit_code"`   // populated in done
	DurationMS *int64 `json:"duration_ms"` // populated in done
	Error      string `json:"error"`       // populated on error
}